Here are the warning sequences (using Twinkle) related to vandalism:
- User has written I love Chris LOL! :) in the article on Monarch butterflies. This is their first edit on Wikipedia. Issue them a general note for vandalism (which van be found on twinkle by clicking the TW tab near the top right of the page and click on 'vandalism'). This is the same warning shown in WP:WARN.
- The user has reverted your revert and has replaced the vandalism, or created new vandalism (or performed any other vandalism on the same day. Do the same process as above but give them a level 2 warning ( labelled as a caution on Twinkle)
- The user is now seen as purposely vandalizing Wikipedia as they have, on the same day gone onto a completely different article and have placed 'Dfdfhhgrhdhdthdthdthdthdthgdhdthdhthhtdtfhdhdhdthdtfghfhtdh'. Like before, give them a warning but now under level 3 (labelled as warning on Twinkle). This message informs the user that they maybe blocked if they continue.
- The user has continued to vandalize in another article. Issue them their final warning (level 4 labelled final warning using Twinkle). If, you are dealing with a registered account (not an IP) it is probably clear that this is a vandalism only account and you can report at WP:AIV using Twinkle. You click on the TW tab and click 'ARV'. Click on the 'select report type' and click vandalism. Then it asks you to tick a box, asking you why you have reported them. Click on 'Evidently a vandalism only account'. Note - you have an option to add a message. Then click 'submit query'.
- If you have given the registered user another chance or the IP has continued to vandalize after the final warning, then report at WP:AIV using Twinkle and click on 'vandalism after final warning' with optional message and submit query.
- If there is a user who already has a warning for vandalizing Wikipedia (on the same day you revert the vandalism) there is no need to start from a general note. If they were given a caution, give them a warning, if they were given a final warning on the same day, report them.